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Response to Arguments 

Applicant has elected group II, claims 55-60 without traversal. Please note that prior to 
allowance non-elected claim must be cancelled. 

Claim Rejections - 35 USC §103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

Claims 55-60 are rejected under 35 U.S.C. 103(a) as being unpatentable over Alden et al. 
(U.S. Patent 6,101,543) in view of Erickson et al. (U.S. Patent 6,412,009). 

For claim 55, Alden teaches, a method of communicating between computers, comprising the 
steps of: 

(1) transmitting from a first computer to an intermediate server computer a first message 
through a firewall port that is to Internet traffic, wherein the first message requests establishment 
of a connection between the first computer and the intermediate server computer over a first 

I 

return path; (Alden, Col. 6 lines 47-67, tunnel, firewall) 

(2) receiving fi"om the intermediate server computer a response including a connection 
identifier corresponding to the first return path; (Alden, Col. 6 lines 47-67, tunnel) 

(4) exchanging encryption keys between the first computer and the intermediate server 
computer; (Alden, Col. 8 lines 45-67, keys) 
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(5) repeating steps (1) through (4) between a second computer and the intermediate 
server computer, thereby creating a second return path between the second computer and the 
intermediate server computer; (Alden, Col. 6 lines 47-67, tunnel) 

(6) transmitting encrypted information from the first computer to the intermediate server 
computer using further messages over the first return path; (Alden, Col. 8 lines 45-67, keys) . 

and (7) transmitting the encrypted information from the. intermediate server over the 
second return path. (Alden, Col. 8 lines 45-67, keys) 

Alden fail to teach, normally open, HTTP POST, (3) periodically transmitting from the 
intermediate server computer to the first computer a "keep alive" message if no further messages 
are received from the first computer within a period of time; 

Erickson teaches, normally open , HTTP POST (Erickson , Col. 5 lines 43-42, CoL 8 lines 20-40, 
figure 5, Http Post), (3) periodically transmitting from the intermediate server computer to the 
first computer a "keep alive" message if no ftirther messages are received from the first computer 
within a period of time; (Erickson , Col. 5 lines 43-42, Col. 8 lines 20-40, figure 5, Http, Keep- 
Alive) 

Alden and Erickson are both in the field of tunnels 

Alden and Erickson are compatible because Alden allows for a connection thru firewalls (Alden, 
Col. 6 lines 46-56) 
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It would have been obvious to on of ordinary skill in the art at the time of the invention 
was made to combine Alden with Erickson in order to over prior issue with use of web client 
access to network within firewall allowing a connection. (Erickson Col. 2 lines 26-64 and Col. 4 
lines 10-22) 

For claim 56, Alden- Erickson teaches, the method of claim 55, further comprising the steps of, 
in the intermediate server computer, decrypting encrypted information received from the first 
computer using encryption keys shared between the first computer and the intermediate 
computer, and then re-encrypting the received information using encryption keys shared between 
the intermediate computer and the second computer. (Alden, Col. 8 lines 45-67. keys) The same 
motivation that was utilized in the rejection of claim 55, applies equally as well to claim 56. 

For claim 57, Alden- Erickson teaches, a method of communicating between a first computer 
protected by a first firewall and a second computer protected by a different second firewall, 
comprising the steps of: 

(1) at a third computer situated between the first firewall and the different second 

w 

firewall, receiving a first HTTP message from the first computer through a port in the first 
firewall that is configured to be open to outgoing HTTP traffic and open to incoming HTTP 
traffic that is responsive to and linked to outgoing HTTP traffic; (Alden, Col. 6 lines 46-56, 
tunnel) and (Erickson , Col. 5 lines 43-42, Col. 8 lines 20-40, figure 5, Http, Keep- Alive) 



4 
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(2) from the third computer, sending a first response message to the first computer 
through the port in the first firewall, thereby establishing a first receive channel through the first 
firewall, wherein the first response message is linked to the first HTTP message; (Alden, Col. 6 
lines 46-56, tunnel) (Erickson , Col. 5 lines 43-42, Col. 8 lines 20-40, figure 5, Http, Keep- 
Alive) 

(3) at the third computer, receiving a second HTTP message from the second computer 
through a port in the different second firewall that is configured to be open to outgoing HTTP 
traffic and open to incoming HTTP traffic that is responsive to and linked to outgoing HTTP 
traffic; (Alden, Col. 6 lines 46-56, tunnel) (Erickson , Col. 5 lines 43-42, Col. 8 lines 20-40, 
figure 5, Http, Keep- Alive) 

(4) from the third computer, sending a second response message to the second computer 
through the port in the different second firewall, thereby establishing a second receive channel 
through the second firewall, wherein the second response message is linked to the second HTTP 
message; (Alden, Col. 6 lines 46-56, tunnel) (Erickson , Col. 5 lines 43-42, Col. 8 lines 20-40, 
figure 5, Http, Keep- Alive) 

(5) at the third computer, receiving a third encrypted HTTP message from the first 
computer through the port in the first firewall; (Alden, Col. 6 lines 46-56, tunnel) (Erickson , 
Col. 5 lines 43-42, Col. 8 lines 20-40, figure 5, Http, Keep-Alive) 

determining that the third encrypted HTTP message is intended to be delivered to the 
second computer, and transmitting to the second computer the third encrypted HTTP message, 
wherein the third encrypted HTTP message is transmitted over the second receive channel to the 



1 
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second computer; (Alden, Col. 6 lines 46-56, tunnel) (Erickson , Col. 5 lines 43-42, Col. 8 lines 
20-40, figure 5, Http, Keep- Alive) 

and (6) from the third computer, periodically transmitting "keep alive" messages to the 

first and second computers to avoid a time-out condition. (Erickson , Col. 5 lines 43-42, Col. 8 
lines 20-40, figure 5, Http, Keep- Alive) 

The same motivation that was utilized in the rejection of claim 55, applies equally as v^ell 
to claim 57. 

For claim 58, Alden- Erickson teaches, the method of claim 57, wherein step (5) is performed at 
the third computer by transmitting the third encrypted HTTP message to the second computer 
without decrypting contents of the third encrypted HTTP message. (Erickson , Col. 5 lines 43-42, 
Col. 8 lines 20-40, figure 5, Http) The same motivation that was utilized in the rejection of claim 
55, applies equally as well to claim 58. 

For claim 59, Alden- Erickson teaches, the method of claim 55, wherein at least one of the HTTP 
POST messages transmitted during step (6) comprises an identifier of said second computer 
encrypted with a first encryption key associated with the intermediate server, and wherein said 
encrypted information is encrypted with a second different encryption key associated with the 
second computer. (Erickson, Col. 5 lines 43-42, Col. 8 lines 20-40, figure 5, Http Post) and 
(Alden, Col. 8 lines 45-67, keys) The same motivation that was utilized in the rejection of claim 
55, applies equally as well to claim 59. 
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For claim 60, Alden teaches, the method of claim 57, wherein the third encrypted HTTP message 

V 

comprises: 

an encrypted identifier of the second computer, the identifier encrypted with a first 
encryption key associated with the third computer, and encrypted content for delivery to the 
second computer, the content encrypted with a different second encryption key associated with 
the second computer. (Erickson , Col. 5 lines 43-42, Col. 8 lines 20-40, figure 5, Http) and 
(Alden Cpl. 8 lines 45-67, keys) The same motivation that was utilized in the rejection of claim 
55, applies equally as well to claim 60. 

Conclusion 

The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. See attached Notice of references cited (if appropriate). 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Ajay M. Bhatia whose telephone number is (571)-272-3906. The 
examiner can normally be reached on M-F 8:30 am - 5:00 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Jason Cardone can be reached on (571)272-3933. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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